Vulnerabilities > CVE-2006-5831 - Input Validation vulnerability in AIOCP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
aiocp
exploit available
NVD
Published: 2006-11-10
Updated: 2018-10-17

Summary

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the load_page parameter.

Vulnerable Configurations

Part Description Count
Application
Aiocp
8

Exploit-Db

descriptionAIOCP 1.3.x /admin/code/index.php load_page Parameter Remote File Inclusion. CVE-2006-5831. Webapps exploit for php platform
idEDB-ID:28922
last seen2016-02-03
modified2006-11-06
published2006-11-06
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/28922/
titleAIOCP 1.3.x /admin/code/index.php load_page Parameter Remote File Inclusion

References